4.13.1
Added 1
- Add React Aria support
Security 3
- Drop custom registry headers on cross-origin redirects to prevent credential leakage
- Validate file paths for registry items without an explicit target to prevent path traversal
- Prevent flag injection from registry-supplied dependency strings during install
Patch Changes
-
#11196
c49c3061b5b86b130736d36bf20008349f89b416Thanks @shadcn! - Drop custom registry headers on cross-origin redirects to prevent credential leakage. -
#11191
df2656111fc8ca030eb768ade2da26cef2fd11b5Thanks @shadcn! - Validate file paths for registry items without an explicit target to prevent path traversal. -
#11195
b8a8e9209659fa810514b61c60ad593bc81973f9Thanks @shadcn! - Prevent flag injection from registry-supplied dependency strings during install. -
#11208
2b89d67e19ceda27381477e127b349f9aaa25355Thanks @shadcn! - Add React Aria support.